1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

[Release] Asuswrt-Merlin 384.12 is now available

Discussion in 'Asuswrt-Merlin' started by RMerlin, Jun 22, 2019.

  1. RMerlin

    RMerlin Super Moderator

    Joined:
    Apr 14, 2012
    Messages:
    32,109
    Location:
    Canada
    Asuswrt-Merlin 384.12 is now available for all supported models. This release merges with new GPL and brings various enhancements.

    Also, note that the project now has its own dedicated domain name. The official project website is now https://www.asuswrt-merlin.net/ . My contact email for anything related to this project has also now changed to merlin <at> asuswrt-merlin <dot> net.

    The highlights of changes in 384.12:
    • Merged GPL 384_45717 for non-AX models, with 382_51634/51640 binary blobs for the RT-AC87U and RT-AC3200.
    • Implemented support for WS Discovery. This allows Windows clients without SMBv1 support to discover your router's network shares.
    • Updated components: nano 4.2, OpenSSL-10x to 1.0.2s, OpenSSL11x to 1.1.1c, curl 7.65.1 and miniupnpd 20190604 snapshot.
    • Classification page now shows local clients by their names instead of their IP
    • Reworked handling of up/down events in OpenVPN, resolved a number of issues/limitations.
    • Added firewall to OpenVPN clients, which is enabled by default. This prevents remote servers from accessing your LAN through the VPN tunnel. If you have a site-to-site tunnel, or another setup where you are expecting inbound traffic to be sent to you through the tunnel then you can disable the firewall on the OpenVPN client page.
    • The router will now directly use the WAN-configured DNS for name resolution done on the router itself by default. The option is still configurable under Tools -> Other Settings for those who have a particular need that requires the former default behaviour. This matches how stock firmware works, and this change has zero impact on your LAN clients.
    • SSL certificates generated on the router will now use a random serial number, which might help browsers that don't like having different certificates with the same serial number but a different signature.
    • Network Analysis page on non-HND router now also use the Netool daemon, however they still use the original busybox version of traceroute (the newer version is not compatible with older uclibc versions)
    • Resolved IPv6 connectivity issues on the RT-AX88U (fix backported from other models)

    Please review the changelog for the complete list of changes.

    Downloads are here.
    Changelog is here.
     
    Last edited: Jun 22, 2019
  2. Kingp1n

    Kingp1n Senior Member

    Joined:
    Feb 27, 2018
    Messages:
    416
    Seems like im the 1st downloading for RT-AC86U...awesome job RMerlin!!!
     
    tyspeed42, Vexira and Zastoff like this.
  3. Ah-Pin-Kor

    Ah-Pin-Kor New Around Here

    Joined:
    Aug 20, 2014
    Messages:
    5
    - FIXED: CVE-2019-11477, CVE-2019-11478 and
    CVE-2019-11479 (themiron)

    Looks like tcp SACK panic is fixed.
    Thanks RMerlin & themiron!
     
  4. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    6,367
    Location:
    Switzerland
    Next Diversion release has the new Asuswrt-Merlin domain (asuswrt-merlin.net) and its subdomain for firmware updates in the hard-coded whitelist.
     
    Zastoff, Teymur, no_name and 11 others like this.
  5. Raphie

    Raphie Senior Member

    Joined:
    Sep 19, 2017
    Messages:
    228
    flashed, seems to work fine.
    activated the DNS-TLS thingy, is it me, or is page loading via cloudfare just a bit slower than my own providers DNS servers?
    it seems the latency, before the page loads is higher, not as it being a router performance problem, but more the round trip of the DNS query, or am I imagining this?
     
  6. Stardust

    Stardust Occasional Visitor

    Joined:
    Dec 3, 2017
    Messages:
    49
    Location:
    Czech Republic
    It seems to work fine on my router too :)
    Thanks :)
    Are using OpenDNS.
    What can I do to upgrade security without downgrade the speed too much?
     
  7. eddiez

    eddiez Senior Member

    Joined:
    Jun 29, 2015
    Messages:
    469
    Location:
    Netherlands
    Media bridge working fine. But then again, nothing changed for this :)
     
  8. wiz

    wiz Regular Contributor

    Joined:
    Feb 15, 2013
    Messages:
    142
    Location:
    the Netherlands
    Just updated my AC5300. I had to stop / start openvpn before it actually ran (gui said running, logging did not show it was started at all), but other than that nothing out of the ordinary.

    Thanks Eric!
     
  9. thelonelycoder

    thelonelycoder Part of the Furniture

    Joined:
    Jan 23, 2014
    Messages:
    6,367
    Location:
    Switzerland
    Smooth update from 384.11_2 to 384.12 on the AX88U.
    I DO have to set local DNS caching to Yes for my local servers to work in my LAN, just as mentioned in the changelog.
     
    Zastoff, sentinelvdx and QuikSilver like this.
  10. netmik3

    netmik3 Senior Member

    Joined:
    Dec 8, 2012
    Messages:
    252
    Great thanks
     
  11. Raphie

    Raphie Senior Member

    Joined:
    Sep 19, 2017
    Messages:
    228
    TLS DNS is significantly slower here.
    Speedtest.net shows 250Mbit+ with my providers DNS configured, and 138Mbit Max with cloudfare configured. I'll leave TLS off for now
     
  12. miazza

    miazza Occasional Visitor

    Joined:
    May 23, 2019
    Messages:
    40
    Sorry for the noob question: if I update do I loose all my settings ? Shall I Install amtm and Diversion again ?
     
  13. Treadler

    Treadler Very Senior Member

    Joined:
    Nov 9, 2017
    Messages:
    595
    Location:
    South Australia
    No.
    I didn’t. I just flashed it over the top & thus far, all seems ok.
    YMMV.
     
    miazza likes this.
  14. Chrisgtl

    Chrisgtl Regular Contributor

    Joined:
    Sep 4, 2018
    Messages:
    81
    @RMerlin Thanks for the latest release. All working well here.
     
  15. miazza

    miazza Occasional Visitor

    Joined:
    May 23, 2019
    Messages:
    40
    On my AC86U Update failed with this file : RT-AC86U_384.12_0_cferom_ubi

    Router restarted with 384.11_2

    Update: did it again, same file , just a new try and went OK.
    Everything OK for the time being.
     
    Last edited: Jun 22, 2019
  16. Centrifuge

    Centrifuge Regular Contributor

    Joined:
    Sep 12, 2017
    Messages:
    87
    Smooth flash over 384.11_2, thanks Merlin, script magicians, and all the alpha and beta testers, it's been a real education.
     
  17. EVO2point0

    EVO2point0 Occasional Visitor

    Joined:
    Nov 27, 2017
    Messages:
    10
    I guess there will be 384.12_2 in a couple of days. :)
     
  18. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    10,929
    Updated several RT-AC68U's, RT-AC86U's and a few RT-AC3100's to 384.12, no issues. :)
     
    Zastoff likes this.
  19. MDM

    MDM Regular Contributor

    Joined:
    Dec 19, 2018
    Messages:
    187
    Location:
    Belgrade, Serbia
    Of course the DNS inquiry is slower (higher latency than providers DNS) over DoT, but it can not affect the speed when the address gets resolved!
    Reset to factory defaults...
     
    CriticJay and netmik3 like this.
  20. MDM

    MDM Regular Contributor

    Joined:
    Dec 19, 2018
    Messages:
    187
    Location:
    Belgrade, Serbia
    Updated, all is fine.
     
    Zastoff likes this.